6 citations · 13 across the 8 of their papers we have counts for
7 papers
Performance Evaluation of Large Language Models in Statistical Programming
Xinyi Song, Kexin Xie, Lina Lee +10
The programming capabilities of large language models (LLMs) have revolutionized automatic code generation and opened new avenues for automatic statistical analysis. However, the v…
Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks
Hao He, Bogdan Vasilescu, Christian Kästner
Recent high-profile incidents in open-source software have greatly raised practitioner attention on software supply chain attacks. To guard against potential malicious package upda…
LiCoEval: Evaluating LLMs on License Compliance in Code Generation
Weiwei Xu, Kai Gao, Hao He +1
Recent advances in Large Language Models (LLMs) have revolutionized code generation, leading to widespread adoption of AI coding tools by developers. However, LLMs can generate lic…
Personalized First Issue Recommender for Newcomers in Open Source Projects
Wenxin Xiao, Jingyue Li, Hao He +2
Many open source projects provide good first issues (GFIs) to attract and retain newcomers. Although several automated GFI recommenders have been proposed, existing recommenders ar…
Understanding and Remediating Open-Source License Incompatibilities in the PyPI Ecosystem
Weiwei Xu, Hao He, Kai Gao +1
The reuse and distribution of open-source software must be in compliance with its accompanying open-source license. In modern packaging ecosystems, maintaining such compliance is c…
Automating Dependency Updates in Practice: An Exploratory Study on GitHub Dependabot
Runzhi He, Hao He, Yuxia Zhang +1
Dependency management bots automatically open pull requests to update software dependencies on behalf of developers. Early research shows that developers are suspicious of updates…
Demystifying Software Release Note Issues on GitHub
Jianyu Wu, Hao He, Wenxin Xiao +2
Release notes (RNs) summarize main changes between two consecutive software versions and serve as a central source of information when users upgrade software. While producing high…